ares · self-taught engineer · Rust, TypeScript, security
I build products people can use today.
Three live, open source products, each built for a different audience: repo.ing pays open source builders, Ohiyo is a free group chat with a lock for private conversations, and wmcp.sh gives AI agents tools for any URL. For the deeper systems work, see Korg.
For open source builders
repo.ing
The market layer for open source.
Launch a market for any public GitHub repository or Hugging Face model on Solana. Every trade pays a fee to the project's builders, even before they show up to claim it.
- One market per project. Identity follows GitHub's permanent repository ID, so a rename or transfer doesn't create a duplicate.
- Builders get paid in SOL. A current repo admin verifies with GitHub, binds a wallet, and claims accrued fees.
- Accounting in public. Payouts, volume, and buyback receipts are published on the Stats page.
A community launch does not imply maintainer endorsement, and a repository token gives no ownership of the code, repository, brand, or business. Token trading is risky. Source (AGPL-3.0) · Protocol stats
# inside any GitHub-backed project
$ cd your-project
$ bunx @repoing/cli launch
# detects origin → opens a signed launch review.
# the CLI never sees your keys; your wallet approves.
- Status
- Live on Solana mainnet
- Builder share
- 0.994% of fee-paying trade value, pre-graduation
- Works with
- GitHub repos, Hugging Face models
- GitHub permission
- Metadata: read only
For friends, clubs, and communities
Ohiyo
Group chat that's actually yours.
A free, open source group chat: text, voice, video, screen share, and watch parties. Sign up with a username and password, no email needed, and send your friends an invite link.
- A lock for private chats. Turn it on in a DM or group chat and messages are encrypted on your device; one-to-one chats use the Signal Protocol.
- No ads, no paid tier. Themes, custom emoji, and GIF avatars are part of the app.
- Leave whenever you like. Rebuild a Discord server from its template, or self-host: one server program and one database file.
Public beta. The lock is opt-in, and the encryption has not been externally audited yet; the threat model spells out what is and isn't protected. Threat model · Source (AGPL-3.0)
- LockedDMs and group chats, once you turn the lock on. The server stores only ciphertext.
- Not lockedChannels inside a space. Stored like any chat server's.
- ExperimentalGroup-chat locks. A message sent while you were offline can be missed.
- Status
- Public beta, v0.3.1
- Runs on
- Browser · Mac · Linux
- Stack
- Rust (axum) · React 19 · Tauri 2
- Price
- Free
For AI agent developers
wmcp.sh
Turn any URL into agent-callable MCP tools.
A hosted, spec-compliant MCP server. Point Claude Code, Cursor, Codex, or any MCP client at a URL and your agent can read prices, list variants, or call an API on a site that ships no MCP server of its own.
- One endpoint, not one server per site. Shopify, JSON-LD, OpenAPI, and provider adapters run first; an LLM fallback produces best-effort tools.
- One line of config. Add the URL to your MCP client, or call the REST API directly.
- Free to try. Discovery is 100 reads a day with no signup; live tool execution starts at $39/mo.
Open-source adapters and SDKs for Python and JavaScript. Source (MIT)
$ curl 'https://wmcp.sh/api/v1/tools?url=\
https://www.allbirds.com/products/mens-wool-runners'
# → MCP-shaped tool list:
# get_price · list_variants · add_to_cart
- Status
- Live at wmcp.sh
- Protocol
- JSON-RPC 2.0 over Streamable HTTP
- Clients
- Claude, Cursor, Codex, Cline, VS Code
- Runs on
- Cloudflare Workers + KV
The engineering
Korg
Prove what your AI agent did.
A separate project, and the clearest look at how I build: a tamper-evident, SHA-256-chained ledger for AI agents. Edit one recorded event and the verifier names it. No trust in the producer, no blockchain.
- Three independent verifiers. Rust, Python, and JavaScript implementations, differentially fuzzed against each other.
- Cross-vendor format. Adapters ingest Claude Code, OpenAI Codex CLI, and Grok Heavy traces into one
korg-ledger@v1spec. - Limits written down. v1 targets local, single-user workspaces, and agents must be told to log.
Rust · MIT OR Apache-2.0 · crates.io · yvaehkorg.lol
$ korg-verify session.jsonl
✓ journal VALID — 6 events, hash-chain + DAG intact
# rewrite one line of the agent's edit
$ sed -i '4s/return a - b/return a + b/' session.jsonl
$ korg-verify session.jsonl
✗ journal INVALID — 1 problem(s):
- seq 4: entry_hash mismatch (content was tampered)
Output from the repository's 30-second quickstart, using its sample Claude Code session.
Also built
- ningen-shikkakuSession-bound secrets in locked RAM, wiped the instant your session dies. MCP adapter for agents.Rust
- korgexA provider-agnostic, MCP-native coding agent that records its work to a tamper-evident ledger.Python · PyPI
- RepoLensChrome extension with a verdict-first production-readiness read on GitHub, npm, and PyPI projects.JavaScript
- Everything elseAll public repositories, experiments included.GitHub →
How I ship
Honest about what works.
Say what's live
repo.ing's README separates what is live from what is built but gated, down to which executors are switched off.
Publish the limits
Ohiyo ships a public threat model and a list of known encryption limits. Korg documents where its guarantees stop.
Keep it open
All four projects are open source (AGPL-3.0, MIT, or MIT/Apache-2.0), so you can read the code before you trust it.
Next step
Pick the product that fits, or say hello.
Each product stands on its own. Start with the one that solves your problem, and reach out on X or GitHub for anything else.